This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/8D655C9656A511EA8FAB974DC4F9AE02.roa
File:                     8D655C9656A511EA8FAB974DC4F9AE02.roa (raw, json)
Hash identifier:          7f3lV5fclUFk4HpC8eAZ02uUzhTxBR66fxeDdnxYpgw=
Subject key identifier:   A2:6F:44:34:E8:14:7B:F2:EA:97:CE:4E:28:8E:96:B8:A1:31:33:14
Certificate issuer:       /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Certificate serial:       0F17
Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/8D655C9656A511EA8FAB974DC4F9AE02.roa
Signing time:             Tue 20 Jan 2026 18:14:48 +0000
ROA not before:           Tue 20 Jan 2026 18:14:48 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     64200
IP address blocks:        103.105.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
                          rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3863 (0xf17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D29F, serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
        Validity
            Not Before: Jan 20 18:14:48 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696fc618-1182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2a:cf:30:04:7e:06:cd:ae:66:47:63:48:f6:
                    65:36:f5:43:92:e6:11:87:03:8c:ad:5b:da:18:73:
                    68:43:ed:2a:70:79:d4:de:81:10:47:15:d8:c8:8f:
                    93:5e:46:55:97:38:ee:6c:1a:fc:f6:57:3b:70:cd:
                    11:de:f3:1e:ef:09:7f:c3:6a:51:12:e1:d7:b2:f8:
                    6c:21:e3:1f:8e:3c:83:48:8c:d2:3e:47:e7:3b:be:
                    2f:06:1c:ef:16:e0:d5:75:e8:99:fc:d6:c9:7c:31:
                    63:a6:62:fc:ee:f6:4a:93:dc:f7:d9:ca:aa:67:c8:
                    80:94:b2:99:6e:ea:38:b3:b6:b8:e5:06:55:cb:94:
                    b2:a6:ee:b3:94:58:de:a1:06:cc:25:11:b8:e4:c6:
                    d1:c0:e1:4c:d0:d5:24:3a:4b:48:b6:75:87:41:4a:
                    74:4d:cd:95:d1:26:37:ef:57:36:fc:8f:1c:8e:66:
                    0e:17:cc:73:6f:c9:54:ab:05:ee:2e:91:95:d9:94:
                    74:4a:84:22:2a:b4:59:db:c1:2e:23:e4:d4:65:96:
                    d7:f7:be:e0:34:5b:53:e8:aa:ae:92:7b:ce:81:fa:
                    7f:f3:94:c7:e7:15:d1:4a:8f:53:14:11:89:a7:bc:
                    d2:19:c1:f4:86:69:23:94:82:a3:be:53:36:d3:b2:
                    c3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6F:44:34:E8:14:7B:F2:EA:97:CE:4E:28:8E:96:B8:A1:31:33:14
            X509v3 Authority Key Identifier:
                keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/8D655C9656A511EA8FAB974DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:e2:af:35:51:99:50:0f:81:e7:9e:ba:fa:60:2f:a6:43:d4:
         38:35:14:3e:3d:c0:cf:50:f0:a3:5f:34:46:51:fd:e2:07:f6:
         74:fc:ff:1b:24:cf:6c:5b:b0:15:ad:d4:22:6f:ad:37:92:2c:
         a2:30:98:68:13:87:8b:83:aa:ad:21:06:5a:73:27:76:10:02:
         03:42:d6:18:01:cc:f9:b9:79:68:a8:fc:1c:54:ed:15:5f:0b:
         12:0f:43:0b:68:81:35:4a:7d:b2:53:64:7b:fd:03:69:62:0d:
         2f:1f:4b:9e:fa:e9:dc:94:50:38:a9:3c:72:31:ea:7c:9d:04:
         af:04:14:64:5b:24:9e:77:86:16:b3:65:67:17:aa:93:0f:7b:
         8b:07:2f:ad:e3:cf:11:f2:98:83:82:f8:71:03:c3:57:c4:00:
         b1:15:49:c0:42:7e:41:d1:2d:f2:eb:78:7c:72:3c:64:be:88:
         a8:ea:1b:30:05:bd:52:12:2e:b7:20:df:5f:38:ff:e6:0b:bd:
         d3:84:e8:b9:17:65:e7:b0:7d:56:77:e8:06:ce:0b:1d:73:0f:
         fb:46:90:9b:9d:29:7b:a2:15:db:27:69:e3:28:c1:86:b7:95:
         60:1c:6c:31:29:b0:11:3c:70:91:2d:55:3a:09:85:4d:07:83:
         85:c9:75:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:20 2026 by rpki-client